ella123/hyperf-sms
Documentation and licensing are in place, and the repository includes tests. The repository has no security policy; its workflows use an archived action and leave all four action references unpinned. It is neither deprecated nor archived.
54%
Total Score
50
92
75
Health Score Breakdown
The package has only 3 releases and none in the last 12 months; its latest registry release was in November 2024, indicating a substantial maintenance gap for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing maintenance, although the repository was pushed more recently than the registry release history.
The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence that the package is unsafe.
All 4 analyzed action references are unpinned, and a high-confidence medium-severity finding reports an archived action in the release workflow. No untrusted checkout or script-injection path was found, which limits the impact.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hyperf/di Version ^3.1 | — | — |
hyperf/event Version ^3.1 | — | — |
hyperf/config Version ^3.1 | — | — |
hyperf/guzzle Version ^3.1 | — | — |
hyperf/logger Version ^3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.